summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2017-09-22... same for dracutGravatar Christian Hesse1-2/+2
2017-09-22we always need the workerGravatar Christian Hesse1-2/+2
2017-09-16update for recent keyring changes in systemdsystemd-v235Gravatar Christian Hesse4-1/+4
With systemd v235 we will have new KeyringMode= for services. Setting KeyringMode=shared allows to share secrets between services. Use that for our services. As udev is not started with a shared keyring we can not run the worker directly. Instead always start the service.
2017-07-04prepare version 0.7.10.7.1Gravatar Christian Hesse1-1/+1
2017-07-03undo the changes with session keyringsystemd-v234Gravatar Christian Hesse1-16/+1
The keyring handling has been fixed with systemd v234, so revert using the session keyring.
2017-07-03prepare version 0.7.00.7.0Gravatar Christian Hesse1-1/+1
2017-06-22do not track changes in /etc/ykfde.d/Gravatar Christian Hesse2-1/+4
2017-06-22rename the worker programGravatar Christian Hesse9-33/+17
This is no longer just udev... So rename and move.
2017-06-22wipe second factor from memoryGravatar Christian Hesse1-0/+1
2017-06-20Rework the code, update keyring handlingsystemd-v233Gravatar Christian Hesse6-194/+208
This had some historical issue... So rework the code: * split into more functions * drop the sleep and notify logic * update keyring handling Depending on setup and systemd version (233 and up) the keyring handling fails. Try to fix this by... * writing to session keyring first * setting permissions * linking to user keyring * unlinking from session keyring https://mjg59.dreamwidth.org/37333.html
2017-06-20Revert "request key from user keyring"Gravatar Christian Hesse1-1/+1
This reverts commit e90e36ae106b4c6ff30a6ce0c0b1d03a5615a363. The argument expects a destination keyring to create a key in case it is not found. So keep the zero, which means not to create a key.
2017-06-14invert conditionGravatar Christian Hesse1-8/+5
2017-06-14FIX: save old termio structure properlyGravatar Benjamin Pereto1-2/+2
2017-04-28Updated ykfde.c to silently skip terminal updates when tcgetattr fails so ↵Gravatar Alec Lanter1-14/+20
that keys can be piped through from other commands.
2017-03-08use https for my mirrorGravatar Christian Hesse1-1/+1
2017-03-02request key from user keyringGravatar Christian Hesse1-1/+1
2017-03-02share memory for passphrase and askpass answerGravatar Christian Hesse1-9/+7
2017-03-02systemd-ask-password: give id as suggested by man pageGravatar Christian Hesse1-1/+1
2017-03-02update copyright for 2017Gravatar Christian Hesse6-6/+6
2016-07-09prepare version 0.6.40.6.4Gravatar Christian Hesse1-1/+1
2016-07-07Small grammar and instruction updatesGravatar Steve Divskinsy2-42/+62
Modified a bit of grammar, added a clarifying paragraph or two, and added a working HOOKS example Signed-off-by: Christian Hesse <mail@eworm.de>
2016-07-06proper clean up of resourcesGravatar Christian Hesse1-7/+15
2016-07-06fix some misc issuesGravatar Christian Hesse1-8/+10
2016-07-06simplify error pathGravatar Christian Hesse1-2/+1
2016-07-06open the Yubikey when neededGravatar Christian Hesse1-11/+57
Some key do an unplug/plug sequence after challenge/response. Thus the second challenge/response failed. So let's open the key only when needed and have a clean context.
2016-07-06update dracut for latest codeGravatar Christian Hesse1-3/+5
Did I get everyting? This is untested...
2016-05-28add EditorConfig configurationGravatar Christian Hesse1-0/+18
2016-05-28indent with tabsGravatar Christian Hesse3-17/+17
2016-05-28Merge branch 'systemd-units'Gravatar Christian Hesse6-29/+31
2016-05-28install systemd unit file without execute permissionGravatar Christian Hesse1-1/+1
2016-05-22do not install ykfde-2f but ykfde-notify.serviceGravatar Christian Hesse1-1/+1
2016-05-22update dependenciesGravatar Christian Hesse1-1/+3
2016-05-22add comment about sleepGravatar Christian Hesse1-0/+3
Is there any better way than sleeping?
2016-05-22do not write password to logsystemd-v230Gravatar Christian Hesse1-1/+1
This requires systemd-ask-password with option --no-output, so it depends on systemd v230 (or commit a5a4e365).
2016-05-22fix start order of unitsGravatar Christian Hesse1-0/+1
2016-05-22drop shell script and implement with systemd unitsGravatar Christian Hesse4-27/+23
2016-05-06use own function to ask for LUKS passphraseGravatar Christian Hesse1-5/+11
2016-05-06prepare version 0.6.30.6.3Gravatar Christian Hesse1-1/+1
2016-05-06make ykfde-cpio depend on version.hGravatar Christian Hesse1-1/+1
2016-05-06give hint we want the *current* second factorGravatar Christian Hesse1-1/+1
2016-05-04update documentation again, give real exampleGravatar Christian Hesse2-16/+20
2016-05-04update help outputGravatar Christian Hesse2-2/+3
2016-05-04update documentationGravatar Christian Hesse2-16/+24
* Use long version of switches. * Use --new-2nd-factor (instead of --2nd-factor) for initialization.
2016-05-04move terminal input to function, verify matching strings for new factorGravatar Christian Hesse1-37/+49
2016-05-04simplify code structureGravatar Christian Hesse1-47/+49
2016-05-04simplify return code handlingGravatar Christian Hesse3-67/+30
We do not return the return codes from library functionen, but that is not a big issue...
2016-05-04support reading second factor from terminalGravatar Christian Hesse3-17/+78
This increases security by not displaying on display and not writing to shell history.
2016-05-04do not allow to give second factor twiceGravatar Christian Hesse1-0/+12
2016-05-04fix error condition for yk_close_key() and yk_release()Gravatar Christian Hesse2-4/+4
2016-05-04fix error condition for yk_init()Gravatar Christian Hesse2-4/+6
2016-05-04fix error condition for yk_get_serial()Gravatar Christian Hesse2-2/+4
2016-05-03prepare version 0.6.20.6.2Gravatar Christian Hesse1-1/+1
2016-05-03add empty line for indentionGravatar Christian Hesse1-0/+1
2016-05-03fix error condition for yk_challenge_response()Gravatar Christian Hesse2-9/+12
2016-05-03do not crypt_free() when crypt_status() failsGravatar Christian Hesse1-1/+1
2016-05-03make ykfde-cpio understand command parametersGravatar Christian Hesse2-2/+35
2016-05-03fix compiler and linker flags and produce binaries with full RELROGravatar Christian Hesse2-2/+4
2016-05-03warn when second factor is preocessed but not enabled in configGravatar Christian Hesse1-0/+5
2016-05-03define new constant for max second factor lengthGravatar Christian Hesse1-2/+3
2016-04-04prepare version 0.6.10.6.1Gravatar Christian Hesse1-1/+1
2016-04-04do not write second factor to stdout (and log to journal)Gravatar Christian Hesse1-1/+1
Signed-off-by: Christian Hesse <mail@eworm.de>
2016-04-04let systemd-ask-password add the key to store and drop keyctlsystemd-v227Gravatar Christian Hesse2-4/+1
Signed-off-by: Christian Hesse <mail@eworm.de>
2016-04-04prepare version 0.6.00.6.0Gravatar Christian Hesse1-1/+1
2016-02-26shell and commands are required for second factor onlyGravatar Christian Hesse1-7/+7
2016-02-25README-mkinitcpio: emphasize we need a systemd-enabled initramfsGravatar Aron Widforss1-2/+3
close #4 Signed-off-by: Christian Hesse <mail@eworm.de>
2016-02-25make sure we have shell and commands in initramfsGravatar Christian Hesse1-0/+7
fix #5
2016-01-20update the dracut stuffGravatar Christian Hesse3-30/+44
Not tested, though...
2016-01-20ups, we want another level of headingGravatar Christian Hesse1-5/+5
2016-01-19add condition for query of 2nd factorGravatar Christian Hesse1-0/+1
2016-01-18update README-mkinitcpioGravatar Christian Hesse1-26/+31
2016-01-18update READMEGravatar Christian Hesse1-3/+1
2016-01-18merge mkinitcpio hooksGravatar Christian Hesse4-17/+16
2016-01-18we have command options to control behaviour, remove loop hackGravatar Christian Hesse1-40/+21
2016-01-18rename ykfde-cpio.service -> ykfde.serviceGravatar Christian Hesse2-1/+1
2016-01-18remove ykfde-cpio hook and make cpio archive mandatoryGravatar Christian Hesse3-21/+0
2016-01-18add and install grub configurationGravatar Christian Hesse2-0/+17
2016-01-18irgnore bad exit status for ykfdeGravatar Christian Hesse1-1/+1
2016-01-18update comment about compiler commandGravatar Christian Hesse1-1/+1
2016-01-18create archive on shutdownGravatar Christian Hesse1-0/+1
2016-01-18remove macro, this works with gcc option -std=gnu11Gravatar Christian Hesse1-7/+0
2016-01-17unlink pid file before exitGravatar Christian Hesse1-0/+2
2016-01-16We have support for second factor. Yeah!Gravatar Christian Hesse12-160/+396
2016-01-04update copyright for 2016Gravatar Christian Hesse4-4/+4
2015-05-27prepare version 0.5.20.5.2Gravatar Christian Hesse1-1/+1
2015-05-27iniparser_getstring() returns const char *Gravatar Christian Hesse2-2/+2
2015-05-12fix typo in commentGravatar Christian Hesse1-1/+1
2015-01-07prepare version 0.5.10.5.1Gravatar Christian Hesse1-1/+1
2015-01-07delete documentation target on errorGravatar Christian Hesse1-11/+5
This prevents zero-size html files to be present on markdown failure.
2015-01-07do not pipe to sed and catch markdown failuresGravatar Christian Hesse1-3/+6
2015-01-07do not recommend to create symlinksGravatar Christian Hesse1-5/+7
Naming executables is package manager's job. We do not touch that but use what is given.
2015-01-06Merge pull request #2 from nj0y/devGravatar Christian Hesse2-7/+56
Update Documentation from Dracut & modified dracut
2015-01-06make challenges available in the main initramfsGravatar Benjamin Pereto1-0/+1
2015-01-06updated README-dracut.mdGravatar Benjamin Pereto1-7/+55
2015-01-06update documentation for mkinitcpio & dracutGravatar Christian Hesse5-96/+191
2015-01-04make defines more portableGravatar Christian Hesse2-4/+10
Looks like _DEFAULT_SOURCE requires a recent glibc and does not work on Fedora. So use _XOPEN_SOURCE and _XOPEN_SOURCE_EXTENDED instead. Reported-by: Benjamin Pereto <benjamin.pereto@gmail.com>
2015-01-04add dracut moduleGravatar Benjamin Pereto4-1/+35
Signed-off-by: Christian Hesse <mail@eworm.de>
2015-01-04add .tar.xz archive for releaseGravatar Benjamin Pereto1-0/+2
2015-01-04add comment with Yubikey details to udev ruleGravatar Christian Hesse1-3/+26
2015-01-04aded more IDs to udev-ruleGravatar Benjamin Pereto1-1/+1
It exists new versions of yubikey, add support
2015-01-04udev rule is installed to mkinitcpio specific pathGravatar Christian Hesse2-1/+1
generated by cgit v1.2.3-70-g09d2 (git 2.47.1) at 2024-12-24 04:24:32 +0000